Four plans. Every limit here is the limit the software enforces.

The numbers below are read from the same constants the API checks against, and each row cites the file that enforces it. If a cap is not listed, it does not exist.

Micro

£29/mo

One person, one or two servers. Monitoring and the live activity feed, without the compliance register.

1 seat · 500 events/day

Create an account

Starter

£99/mo

A small team that needs alerts and a shared workspace, and is starting to be asked compliance questions.

5 seats · 5,000 events/day

Create an account

Business

Produces the register

£349/mo

The plan that produces the control register and the evidence export. This is the one to pick if an assessor is involved.

20 seats · 25,000 events/day

Create an account

Pro

£899/mo

Higher ingest, SOC 2 alongside the other frameworks, and custom detection rules.

9,999 seats · 100,000 events/day

Create an account

What each plan enforces

Every row cites where it is enforced, so you can check it against the product rather than take it on trust.

Fortoxa plan comparison across Micro, Starter, Business and Pro
Capability	Micro	Starter	Business	Pro
Enforced limitsThese are hard caps in the software, not fair-use guidance.
Seatsteam.ts:106,201	1	5	20	9,999
Log events per dayingest-events.ts:39	500	5,000	25,000	100,000
Log events per billing periodusage.ts	15,000	150,000	750,000	3,000,000
Threats visible at oncethreats.ts:35	3	12	50	100
Rows in the activity feeddashboard.ts:102	3	4	10	10
Framework coverageWhich registers the compliance service will build for your region.
Cyber Essentials · NCSC CAF (UK)compliance.ts:212	Cyber Essentials · NCSC CAF (UK): not included in Micro	Cyber Essentials · NCSC CAF (UK): not included in Starter	Cyber Essentials · NCSC CAF (UK): included in Business	Cyber Essentials · NCSC CAF (UK): included in Pro
GDPR Article 32 · NIS2 (EU)compliance.ts:212	GDPR Article 32 · NIS2 (EU): not included in Micro	GDPR Article 32 · NIS2 (EU): not included in Starter	GDPR Article 32 · NIS2 (EU): included in Business	GDPR Article 32 · NIS2 (EU): included in Pro
SOC 2compliance.ts:267	SOC 2: not included in Micro	SOC 2: not included in Starter	SOC 2: not included in Business	SOC 2: included in Pro
Sections you can openGated in the app shell. Lower tiers see these listed and are sent to billing.
Overview, Incident Center, Investigations, Response ActionsSidebar.tsx	Overview, Incident Center, Investigations, Response Actions: included in Micro	Overview, Incident Center, Investigations, Response Actions: included in Starter	Overview, Incident Center, Investigations, Response Actions: included in Business	Overview, Incident Center, Investigations, Response Actions: included in Pro
Assets · Controls · Playbooks · Security MapSidebar.tsx	Assets · Controls · Playbooks · Security Map: not included in Micro	Assets · Controls · Playbooks · Security Map: not included in Starter	Assets · Controls · Playbooks · Security Map: included in Business	Assets · Controls · Playbooks · Security Map: included in Pro
Evidence Center · Audit ReadinessSidebar.tsx	Evidence Center · Audit Readiness: not included in Micro	Evidence Center · Audit Readiness: not included in Starter	Evidence Center · Audit Readiness: included in Business	Evidence Center · Audit Readiness: included in Pro
API keysSidebar.tsx	API keys: not included in Micro	API keys: not included in Starter	API keys: included in Business	API keys: included in Pro
Plan featuresFrom app/lib/tiers.ts, which drives the in-app upgrade prompts.
Real-time alertstiers.ts	Real-time alerts: not included in Micro	Real-time alerts: included in Starter	Real-time alerts: included in Business	Real-time alerts: included in Pro
Team managementtiers.ts	Team management: not included in Micro	Team management: included in Starter	Team management: included in Business	Team management: included in Pro
Alert rulestiers.ts	Alert rules: not included in Micro	Alert rules: not included in Starter	Alert rules: included in Business	Alert rules: included in Pro
Custom detection rulestiers.ts	Custom detection rules: not included in Micro	Custom detection rules: not included in Starter	Custom detection rules: not included in Business	Custom detection rules: included in Pro
Multi-workspacetiers.ts	Multi-workspace: not included in Micro	Multi-workspace: not included in Starter	Multi-workspace: included in Business	Multi-workspace: included in Pro
White-labeltiers.ts	White-label: not included in Micro	White-label: not included in Starter	White-label: not included in Business	White-label: included in Pro
Email supporttiers.ts	Email support: not included in Micro	Email support: included in Starter	Email support: included in Business	Email support: included in Pro
Priority supporttiers.ts	Priority support: not included in Micro	Priority support: not included in Starter	Priority support: included in Business	Priority support: included in Pro
Named account managertiers.ts	Named account manager: not included in Micro	Named account manager: not included in Starter	Named account manager: not included in Business	Named account manager: included in Pro
14-day trial on a new subscriptioncheckout.ts:54	14-day trial on a new subscription: not included in Micro	14-day trial on a new subscription: included in Starter	14-day trial on a new subscription: included in Business	14-day trial on a new subscription: not included in Pro

Two things this table does not claim

There is no data-retention tier. The previous version of this page listed 7, 30 and 90 days and one year; no retention logic exists in the product, so the rows were removed rather than reworded. There is also no service level agreement — if you need one, it has to be agreed, not read off a pricing page.